Vulnerability in Adobe Air
CVE-2009-3799
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."
EPSS: 0.100 (95.1th percentile) — read the EPSS interpretation.
Affected products
- Adobe Adobe_air — versions 1.0, 1.0.1, 1.1
- Adobe Flash_player — versions 7.0, 7.0.1, 7.0.25
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory, Patch)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_SECTRACK)
- psirt@adobe.com (vdb-entry, x_refsource_XF)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_OSVDB, vdb-entry)
- psirt@adobe.com (x_refsource_CONFIRM)
- psirt@adobe.com (vendor-advisory, x_refsource_SUNALERT)
- psirt@adobe.com (vendor-advisory, x_refsource_APPLE)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)